What this site knows about you, and what it never learns.

No account, by design

There is nothing to sign up for and nothing to log into. Your designs are saved in their links — the URL is the design — and in this browser’s own storage, not on our servers. We cannot see what you design unless you choose to send it to us.

What stays in your browser

Your recent designs, any names you give them, and your currency preference live in this browser’s local storage. These are never transmitted as a profile or account. “Forget these” on the recents list deletes the designs and their names; clearing your browser data removes everything.

We count, anonymously — we do not track

To learn which features matter, the site counts how often they are used: when a design is opened, a control is first touched, a specification is requested. Each count is normally a bare event name added to a daily total. For a shared design, events also carry the random ID of that shared object and a bounded action such as “opened” or “changed”. It identifies the link, not a person, and the design itself is never added to analytics. If your browser sends Do Not Track or Global Privacy Control, you are not counted at all, and neither is anything below.

A page view is counted the same way, with four things beside it, each of which is added to a daily total and never kept as a row about you: which kind of page it was — “a band page”, never which band, because the design in the address is the one thing here you made; the hostname of the site you followed a link from, if you followed one; the country our host resolves from your connection, which it does without ever handing us your address; and whether you are on a phone, a tablet or a computer.

To count people rather than page views, the server needs to recognise a second view as the same visitor as the first. It does that without knowing who you are: your address and browser are hashed together with a random value that is thrown away every night. Within a day this counts you once however often you return. After it — because the random value no longer exists anywhere — the result cannot be recomputed, matched or joined to anything by us, by our hosts, or by anyone who takes the database. The consequence, honestly: we cannot tell whether you came back tomorrow, so a monthly figure is daily figures added up rather than a count of distinct people. We would rather report a rougher number than keep a record of you that lasts a month.

Beyond that: no analytics scripts, no advertising pixels, no fingerprinting, no third-party trackers of any kind. Every number above is counted by our own code on our own server; nothing on this site is loaded from an analytics company, and none of it is shared with one. The fonts are your system’s own, so not even a font provider learns you were here.

Infrastructure

The site is hosted on Vercel, whose systems keep standard, short-lived web server logs, and anonymous operational counters live in an Upstash database. Exchange rates are fetched by our server from the European Central Bank; nothing about you is part of that request. These providers process data on our behalf under their own data processing terms.

If you email us

A specification you email to us, or a question you send, arrives as ordinary email and is kept as correspondence. We use it to answer you and for nothing else.

Questions

Norrstone Studio is operated from Reykjavík, Iceland. Write to norrstone@norrstone.com — a person answers, including about anything on this page.